Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33342d3438203d3e20313430343233.roa
File:                     323430363a323063303a3a2f33342d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          I++xj1jDURsOXSW/3PzgvX20S0Z+B3qXmTBSDfrcV50=
Subject key identifier:   4C:18:02:76:48:7D:2D:CC:0A:A8:04:DF:58:5D:FD:4F:54:04:EF:7C
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       1915204EAD0F51E33871E9DD2A96DC26ED4C06CC
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33342d3438203d3e20313430343233.roa
Signing time:             Sun 03 Aug 2025 07:00:00 +0000
ROA not before:           Sun 03 Aug 2025 06:55:00 +0000
ROA not after:            Sun 02 Aug 2026 07:00:00 +0000
asID:                     140423
IP address blocks:        2406:20c0::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 03:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:15:20:4e:ad:0f:51:e3:38:71:e9:dd:2a:96:dc:26:ed:4c:06:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Aug  3 06:55:00 2025 GMT
            Not After : Aug  2 07:00:00 2026 GMT
        Subject: CN=4C180276487D2DCC0AA804DF585DFD4F5404EF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:2d:48:55:b1:23:5d:a5:12:5d:80:9b:ae:
                    87:37:4f:45:91:e5:4e:3f:2b:e9:00:b2:d7:53:7f:
                    ce:4e:ba:37:35:db:ad:7e:d8:45:8a:c8:9a:4f:ae:
                    d9:15:01:70:3b:cb:f7:09:1b:9a:87:5d:ae:3b:17:
                    a6:28:93:34:54:92:c5:f6:c1:28:ae:f6:fa:18:bd:
                    77:29:b4:ac:e2:1f:aa:73:8d:0e:b3:36:c8:46:45:
                    4f:46:b0:f8:34:86:72:9b:2c:64:1e:48:83:59:9d:
                    c1:81:08:c8:e1:2d:f5:98:a9:27:c0:97:8d:c1:bf:
                    9d:63:05:22:ce:2e:b9:0c:00:53:e1:87:91:77:a9:
                    a1:22:e6:15:5e:86:9a:88:a4:66:0c:0f:5d:42:f6:
                    4a:af:74:40:ed:a1:ec:06:96:c2:fb:8d:bd:26:9a:
                    30:d1:75:a7:b8:a2:05:e8:f2:83:62:81:3f:79:71:
                    45:c5:d8:01:1c:63:f0:37:c4:e2:24:d2:37:c9:71:
                    c4:28:41:67:bf:77:de:af:e6:e7:3b:d1:65:d4:99:
                    f2:3e:98:34:4e:73:e3:b6:08:62:25:43:28:a2:61:
                    71:9a:41:f3:74:6d:60:e3:5b:4b:7a:87:36:48:f3:
                    8a:ca:46:14:fe:fb:cb:64:20:09:88:9d:3f:8a:ad:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:18:02:76:48:7D:2D:CC:0A:A8:04:DF:58:5D:FD:4F:54:04:EF:7C
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33342d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:17:8e:03:8b:de:8d:3a:2c:8e:2a:0c:ae:f8:15:fd:97:3e:
         9d:f6:e8:86:e6:14:12:6a:f2:d9:e9:7d:4c:b0:d4:98:5f:9c:
         3b:7b:c1:f1:47:72:8c:7f:31:2b:17:e8:a6:40:20:55:35:3d:
         1f:0c:8d:fd:e0:86:4c:c2:04:52:05:0b:49:73:25:95:44:a8:
         e7:40:4d:e5:48:35:c6:70:d4:e6:a2:87:a7:21:eb:50:75:03:
         c7:e6:c9:7b:f6:0c:7e:75:05:ab:69:38:1c:57:d7:7f:ea:1b:
         b9:9d:53:85:85:0f:cf:4b:c5:00:bd:f4:a4:02:42:51:02:a8:
         43:59:80:4b:2d:5e:3a:4b:d1:86:fa:f2:1d:bf:63:1b:20:2e:
         63:aa:c1:3d:d4:a9:c0:d5:cd:23:0a:89:59:d7:a6:9d:d7:b2:
         af:66:18:2b:9a:9c:39:ac:20:9b:3e:91:3a:89:b7:4b:2d:80:
         92:1b:11:54:ed:8f:f9:f7:05:6b:53:ff:ea:9e:24:cc:32:60:
         45:4f:7c:3f:6b:1e:9d:79:0f:fb:30:3d:b2:c2:b6:22:06:e5:
         4f:ad:a3:45:81:27:0e:d7:3b:83:1b:be:00:ca:85:dd:89:62:
         db:8c:47:4d:36:b5:85:4a:bb:59:4e:38:e9:f9:d7:46:76:74:
         a7:77:da:16
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGRUgTq0PUeM4cendKpbcJu1MBswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yNTA4MDMwNjU1MDBaFw0yNjA4MDIwNzAwMDBaMDMxMTAvBgNV
BAMTKDRDMTgwMjc2NDg3RDJEQ0MwQUE4MDRERjU4NURGRDRGNTQwNEVGN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKC1IVbEjXaUSXYCbroc3T0WR
5U4/K+kAstdTf85Oujc1261+2EWKyJpPrtkVAXA7y/cJG5qHXa47F6YokzRUksX2
wSiu9voYvXcptKziH6pzjQ6zNshGRU9GsPg0hnKbLGQeSINZncGBCMjhLfWYqSfA
l43Bv51jBSLOLrkMAFPhh5F3qaEi5hVehpqIpGYMD11C9kqvdEDtoewGlsL7jb0m
mjDRdae4ogXo8oNigT95cUXF2AEcY/A3xOIk0jfJccQoQWe/d96v5uc70WXUmfI+
mDROc+O2CGIlQyiiYXGaQfN0bWDjW0t6hzZI84rKRhT++8tkIAmInT+KraW5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTBgCdkh9LcwKqATfWF39T1QE73wwHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhM2EyZjMzMzQy
ZDM0MzgyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBiQGIMAAMA0GCSqG
SIb3DQEBCwUAA4IBAQBmF44Di96NOiyOKgyu+BX9lz6d9uiG5hQSavLZ6X1MsNSY
X5w7e8HxR3KMfzErF+imQCBVNT0fDI394IZMwgRSBQtJcyWVRKjnQE3lSDXGcNTm
ooenIetQdQPH5sl79gx+dQWraTgcV9d/6hu5nVOFhQ/PS8UAvfSkAkJRAqhDWYBL
LV46S9GG+vIdv2MbIC5jqsE91KnA1c0jColZ16ad17KvZhgrmpw5rCCbPpE6ibdL
LYCSGxFU7Y/59wVrU//qniTMMmBFT3w/ax6deQ/7MD2ywrYiBuVPraNFgScO1zuD
G74AyoXdiWLbjEdNNrWFSrtZTjjp+ddGdnSnd9oW
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:57 2025 by rpki-client